Privacy

What is collected

Your email address, given when you sign in. It is used to send the six-digit sign-in code and, if ever needed, to reach you about your account.

What you choose to publish: display name, username, bio, and whether your profile is public. Your time zone, which decides which day a game belongs to and therefore your streak.

How you play: for each day and each environment, what you answered, when, and what it earned. The greens and XP ledgers, the projects you funded, and the draw tickets those produced.

If you connect a step source: your daily step count, read from your device maker's servers, and the encrypted tokens that let us read it. A daily step count describes the physical activity of an identified person, so it is treated as health data under Article 9 of the GDPR. The legal basis is your explicit consent — which is exactly the authorisation you gave at the maker, and which you withdraw by disconnecting the source.

If you link a FACEIT account: your FACEIT account id and, for each finished match, the game, the kills and deaths, the number of rounds and when it ended. Only finished matches, and only from FACEIT's own servers.

If you subscribe to the boost: the subscription itself and the activation codes it entitles you to. No postal address is asked for — the subscription is digital, and nothing is shipped. The card itself is never seen by us: payment happens on Stripe's own hosted page.

No analytics, no advertising identifiers, no tracking across other sites. No location data. Steps and kills are counts, never a route or a position.

Why

To run the game: the guesses are what the server replays to decide what a grid was worth. Without them there is no score and no greens.

To keep it fair: the times a guess was made are kept so that unusual patterns can be looked at by a person. They are never used to suspend an account automatically.

To show what you asked to show: a public profile exists because you set it to public, and shows only what this policy lists.

To count a day that was not played on a screen: steps and kills are read on a schedule because that is the only honest way to count them — nothing typed in a browser is ever accepted as a step or a kill.

To buy the impact a project funds: a purchase order exists because a tree has to be planted by somebody.

Who else sees it

Supabase hosts the database and handles sign-in. Vercel hosts and serves the application. Resend sends the emails, and receives the ones written to our contact address. Each of them processes data on our instruction and for no other purpose.

Crisp carries support: the chat bubble inside your account, and the messages sent to our contact address. It sees what you write, the address it comes from, your username, and the figures already shown to you in the sidebar — your greens, your XP, your level. It is a French company and it stores this in the European Union. There is no bubble on the public site: it loads only once you are signed in.

Stripe handles payment for the subscription, on its own hosted page: the card details never reach us. Greenspark buys the impacts a funded project pays for. Tremendous delivers a draw prize to the winner's email address.

Google Health, Oura and Withings are read, not written to: a step source is a one-way authorisation you grant at the maker and revoke there or here. FACEIT is read the same way, for finished matches only.

Nothing is sold, rented, or shared with advertisers. Public profile pages are, by definition, visible to anyone — that is what making a profile public means, and it can be turned off at any time from the profile screen.

How long

As long as the account exists. There is no automatic purge scheduled, and saying otherwise would be an undertaking that nothing enforces.

Your rights

If the GDPR applies to you, you may ask for access to your data, correction, erasure, a copy in a portable form, or restriction of processing. Display name, username, bio, time zone and profile visibility can be corrected yourself from the profile screen.

You delete your account yourself, from Profile and settings. If you have won a draw it is anonymised rather than deleted — your address, name, bio, username and photo are erased, and the row proving your win stays: a draw already held has to remain verifiable.

You may also complain to your local data protection authority.

Contact

Write to the address published in the legal notice below. It reaches a person, not a queue.

Governing language

This document exists in English and in French. **The English version governs**: it is the language it was drafted in, and the language of the applicable law. The French version is a courtesy translation; in case of divergence between the two, the English version applies.

This clause does not deprive anybody of the mandatory provisions of their national consumer law, nor of the right to bring proceedings before the courts of their place of residence.